Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32332d3233203d3e203631393436.roa
File:                     3230312e3133392e3138342e302f32332d3233203d3e203631393436.roa (raw, json)
Hash identifier:          nh3GO4akxRQ7oxJPZjeXvgzglg+vYqKN0zydCigxjYY=
Subject key identifier:   F5:AB:E8:08:8E:9B:51:76:BE:A5:0D:C0:9E:3D:BA:F2:DC:6B:4B:9E
Certificate issuer:       /CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
Certificate serial:       699BD70E324BA1AFA0638656D1B761CC2AA6DD33
Authority key identifier: D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32332d3233203d3e203631393436.roa
Signing time:             Wed 18 Oct 2023 13:57:57 +0000
ROA not before:           Wed 18 Oct 2023 13:52:57 +0000
ROA not after:            Wed 16 Oct 2024 13:57:57 +0000
asID:                     61946
IP address blocks:        201.139.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9b:d7:0e:32:4b:a1:af:a0:63:86:56:d1:b7:61:cc:2a:a6:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
        Validity
            Not Before: Oct 18 13:52:57 2023 GMT
            Not After : Oct 16 13:57:57 2024 GMT
        Subject: CN=F5ABE8088E9B5176BEA50DC09E3DBAF2DC6B4B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:07:f8:ce:0d:e9:94:c5:3a:37:d4:51:a9:
                    fa:03:58:43:35:93:e5:a0:67:8d:a1:5f:f1:69:f3:
                    50:8f:d6:bd:e1:39:fe:29:f3:c2:3a:c1:e9:70:e2:
                    51:87:52:fb:80:e9:88:64:c0:2c:b2:03:c1:41:92:
                    6a:e9:c7:ff:5b:87:09:62:bb:c9:3f:45:57:5a:30:
                    44:58:49:34:2a:a8:3d:83:ae:6b:b8:bb:97:cd:26:
                    86:04:7b:64:1b:34:26:d0:f0:d0:dd:f1:f6:be:47:
                    7f:45:2c:39:67:a0:92:47:e3:89:cd:81:04:b4:ab:
                    a7:32:15:19:f6:ce:b0:b4:11:ae:11:ff:65:44:67:
                    f7:f6:06:58:fc:56:58:23:8a:ef:5f:50:38:42:dc:
                    78:bc:c6:31:c7:f8:de:ad:0f:ce:eb:28:d2:ae:5e:
                    92:bb:7c:bb:b3:3d:74:23:72:96:76:8d:79:fb:de:
                    d1:fc:7e:a8:5d:c5:5e:36:a1:92:ca:a1:76:07:c3:
                    64:bf:53:d9:3e:89:32:d9:0d:52:2c:f8:f7:5f:7f:
                    11:b2:61:a5:c1:1f:10:c0:5b:6d:29:b5:a1:ab:b4:
                    51:cc:7c:be:b8:1d:57:5a:3b:95:64:76:4b:c9:fc:
                    3d:06:cf:96:e1:fc:9b:54:86:10:fc:3e:6d:a7:a4:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:E8:08:8E:9B:51:76:BE:A5:0D:C0:9E:3D:BA:F2:DC:6B:4B:9E
            X509v3 Authority Key Identifier:
                keyid:D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32332d3233203d3e203631393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:41:30:f6:ba:57:be:44:d9:90:3a:8e:89:62:77:95:b2:07:
         fb:82:52:f6:15:91:62:89:0d:d8:05:ad:aa:31:1d:59:24:4a:
         bb:6e:67:8a:db:48:b7:7b:12:21:fe:dc:04:b4:98:3a:18:64:
         ba:c6:56:e1:76:d5:ce:6a:5a:24:40:18:cf:d7:f9:88:6a:c5:
         ea:9a:db:7d:6c:5d:db:93:4f:f9:ed:a5:fb:40:6f:c9:9c:88:
         f4:a3:84:6c:68:a6:e2:05:f8:f0:1e:a4:b5:05:23:42:50:65:
         d1:1e:64:23:79:71:9c:a0:ec:ec:0c:7c:0f:60:d0:88:5e:07:
         a1:f1:64:56:8b:cc:bc:b6:2b:4c:a2:4a:c4:c7:a0:c6:f6:68:
         c0:56:aa:2b:59:be:59:dc:0c:32:c0:49:2e:cd:53:eb:16:44:
         79:ba:e5:14:63:f1:f9:8f:80:13:4f:8d:f1:d9:f1:ee:b4:8d:
         ef:0e:06:a7:8c:cb:fb:fb:39:c7:22:67:33:4a:2e:9e:6c:24:
         e1:32:14:21:16:5f:d7:fc:98:85:fc:8d:f5:83:0b:98:70:06:
         c2:c8:47:0e:2a:aa:1e:13:fd:68:a8:54:25:b1:4a:ec:08:ee:
         b3:d5:ba:0d:03:2f:29:3e:ab:50:5b:a1:23:3d:d4:bc:1e:87:
         3c:7b:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:55 2025 by rpki-client